Google · Chromium V8
CVE-2019-5825
Google Chromium V8 Out-of-Bounds Write Vulnerability
O que é
Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CISA: Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 22 de junho de 2022
Mais falhas exploradas de Google
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 9 de set. de 2026 | Out of Bounds Write | Chromium V8 | Alto 8,8 | 3,5% |
| 4 de set. de 2026 | Type Confusion | Chromium V8 | Alto 8,8 | 1,8% |
| 9 de jun. de 2026 | Out-of-Bounds Read and Write | Chromium V8 | Alto 8,8 | 2,4% |
| 13 de mar. de 2026 | Improper Restriction of Operations Within the Bounds of a Memory Buffer | Chromium V8 | Alto 8,8 | 2,7% |
| 19 de nov. de 2025 | Type Confusion | Chromium V8 | Alto 8,8 | 4,9% |
| 23 de set. de 2025 | Type Confusion | Chromium V8 | Alto 8,8 | 9,0% |
| 2 de jul. de 2025 | Type Confusion | Chromium V8 | Alto 8,1 | 14% |
| 5 de jun. de 2025 | Out-of-Bounds Read and Write | Chromium V8 | Alto 8,8 | 7,8% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.